Ankan Bandyopadhyay

At ISOAH Data Securities Pvt Ltd, I supported security-monitoring engagements for 5+ clients, correlating SIEM logs, triaging alerts, and prioritizing incidents across Wazuh, Elastic, and Seceon. I also authored custom Wazuh detection rules for credential-dumping threats.

I investigated Windows, Linux, network, firewall, VPN, and cloud telemetry, using IOC analysis and threat hunting to support incident investigations. I mapped identified activity to MITRE ATT&CK and documented cases in TheHive and Jira.

I built Hawk-I, a custom IDS/IPS that monitors internal and external network traffic and classifies alerts by severity using custom-defined rules. I also developed Wazuh ticketing automation with Python and n8n to connect alerts with ticketing workflows.

My projects include deploying a Wazuh stack, configuring SIEM dashboards, and building an offensive/defensive security lab. I also practiced vulnerability assessment and web application penetration testing in controlled lab environments.